Ubuntu 4.10 : cyrus21-imapd vulnerability (USN-37-1)

Recently another buffer overflow has been discovered in the SASL authentication module of the Cyrus IMAP server. An off-by-one comparison error in the mysaslcanonuser function could lead to a missing termination of an user name string. This vulnerability could allow remote, attacker-supplied...

Ubuntu 4.10 / 5.04 : postgresql vulnerabilities (USN-118-1)

It was discovered that unprivileged users were allowed to call internal character conversion functions. However, since these functions were not designed to be safe against malicious choices of argument values, this could potentially be exploited to execute arbitrary code with the privileges of th...

[SA18421] Sun Solaris Unspecified Privilege Escalation and Denial of Service

TITLE: Sun Solaris Unspecified Privilege Escalation and Denial of Service SECUNIA ADVISORY ID: SA18421 VERIFY ADVISORY: http://secunia.com/advisories/18421/ CRITICAL: Less critical IMPACT: Privilege escalation, DoS WHERE: Local system OPERATING SYSTEM: Sun Solaris 9 http://secunia.com/product/95/...

Sygate Protection Agent protection bypass

Unprivileged user can disable protection...

Microsoft Windows XP20002003 - CreateRemoteThread Local Denial of Service

Microsoft Windows XP20002003 - CreateRemoteThread Local Denial of Service // source: https://www.securityfocus.com/bid/15671/info Microsoft Windows is prone to a local denial of service vulnerability. This issue can allow an attacker to trigger a system wide denial of service condition or termina...

Microsoft Windows XP/2000/2003 - CreateRemoteThread Local Denial of Service

// source: https://www.securityfocus.com/bid/15671/info Microsoft Windows is prone to a local denial of service vulnerability. This issue can allow an attacker to trigger a system wide denial of service condition or terminate arbitrary processes. Reports indicate that a process can call the...

Oracle XSQL Sample Application Vulnerability

One of the sample applications that comes with the Oracle XSQL Servlet allows an attacker to make arbitrary queries to the Oracle database under an unprivileged account. SPDX-FileCopyrightText: 2001 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Oracle XSQL Sample Application Vulnerability

One of the sample applications that comes with the Oracle XSQL Servlet allows an attacker to make arbitrary queries to the Oracle database under an unprivileged account. Whilst not allowing an attacker to delete or modify database contents, this flaw can be used to enumerate database users and vi...

[SA16955] Sun Solaris Xsun and Xprt Privilege Escalation Vulnerability

TITLE: Sun Solaris Xsun and Xprt Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA16955 VERIFY ADVISORY: http://secunia.com/advisories/16955/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: Sun Solaris 9 http://secunia.com/product/95/ Sun Solari...

Apple Mac OSX 10.4 - dsidentity Directory Services Account Creation and Deletion

Apple Mac OSX 10.4 - dsidentity Directory Services Account Creation and Deletion source: https://www.securityfocus.com/bid/14630/info A vulnerability in Apple Directory Services allows unprivileged users to create or delete directory services idnetity accounts. This issue was originally described...

[NEWS] Default Configuration Information Disclosure in Lotus Domino (Including Password Hashes)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Multiple Bugzilla bug tracking system vulnerabilities

It's possible to change bug flag and, under rare condition to view private bugs by unprivileged user...

Multiple hardware platforms hyper threading technology systems information leak

Unprivileged thread can read data from privileged thread memory from CPU cache memory...

[SA14457] Adobe Reader for Linux Insecure Temporary File Creation

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

DSX Raritan Console Servers weak permissions

Executable files are writable by unprivileged users...

acroread -- insecure temporary file creation

Secunia Research reports: Secunia has discovered a security issue in Adobe Reader for Linux, which can be exploited by malicious, local users to gain knowledge of sensitive information. The problem is caused due to temporary files being created with permissions based on a user's umask in the "/tm...

Enterasys Vertical Horizon switches backdoor accounts

There is undocumented backdoor account tiger/tiger123, in addition some privileged control character combination are available to unprivileged user from console or telnet session...

security flaw

PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."...

kernel security update

CentOS Errata and Security Advisory CESA-2005:472 Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...

CVE-2005-1712

CVE-2005-1712 affects Serendipity 0.8; when used with multiple authors, unprivileged authors can upload arbitrary media files. The provided documents state the vulnerability and affected scenario but do not disclose root cause, exploit details, or a remediation. No explicit patch information is g...